huggingface
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 41 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 18, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Datasets Path Traversal via Unsanitized file_name Metadata
Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers
Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers
Diffusers: TOCTOU Trust Remote Code Bypass
Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components
Diffusers: None.py Trust Remote Code Bypass
LeRobot Unsafe Deserialization Remote Code Execution via gRPC
Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers
huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection
huggingface smolagents LocalPythonExecutor requests.post server-side request forgery
Monitor huggingface in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.